$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa File: 49567968D07011F0A2852929C4F9AE02.roa (raw, json) Hash identifier: fXw8iEy4mUz6Ydq/c5Fi1cFBZt4nFgOfj65Bh0EE5Ms= Subject key identifier: DF:49:C5:B2:E8:5C:73:4E:DC:9E:6F:F7:57:9F:BA:03:F3:E9:A2:E8 Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 2279 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa Signing time: Wed 10 Jun 2026 13:38:50 +0000 ROA not before: Wed 10 Jun 2026 13:38:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 198949 IP address blocks: 43.245.52.0/22 maxlen: 24 112.109.84.0/24 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8825 (0x2279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jun 10 13:38:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a2968ea-b1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:0f:6a:d6:16:8c:af:dd:a2:0c:a4:c5:03: f9:a6:5e:41:9b:71:89:b2:f5:ae:18:da:c3:76:41: 2c:2f:c7:ec:3d:db:e6:91:79:45:cc:76:1d:09:71: 3b:d8:6f:8e:54:00:a9:3d:df:44:b8:25:37:2c:fa: f4:4d:97:ee:ff:3b:b1:61:e0:a1:c8:16:ea:61:22: 93:da:ba:33:0f:86:18:65:89:8a:fc:57:5e:24:36: 37:5e:81:04:17:be:1e:ea:6e:ae:6c:d4:5b:ce:f3: d2:38:1a:8a:15:e7:7f:19:2d:3e:31:43:06:7d:70: 5a:b4:cb:82:37:d8:ca:d0:55:96:e6:3a:cc:aa:ab: c2:77:2d:0c:e1:da:1f:bb:42:6c:95:bc:ec:8b:ae: cd:54:8b:23:19:8b:ca:9c:4a:3b:2e:5d:dd:ee:ca: 48:93:85:c1:a5:e6:2a:a0:fe:0d:d7:24:fa:50:5d: 3d:03:79:f7:54:0b:a7:ce:44:ac:22:bf:88:95:cf: ae:b2:6f:5a:fa:7d:da:a1:bc:e4:d6:6a:d6:10:28: e1:03:43:3a:de:c9:ac:d9:19:ab:ff:6b:97:13:05: e4:8c:2b:a5:e0:4c:9f:54:8a:0b:81:6d:bf:7c:59: a2:f0:df:67:84:56:f8:48:9b:f1:de:15:e9:68:7c: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:49:C5:B2:E8:5C:73:4E:DC:9E:6F:F7:57:9F:BA:03:F3:E9:A2:E8 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.52.0/22 112.109.84.0/24 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 52:60:85:82:89:94:df:75:7c:9a:95:18:78:91:ed:14:d5:44: 59:7d:cd:9b:8e:77:7c:5d:f7:27:31:04:fd:0e:98:70:2d:d9: 38:9d:cd:44:57:ed:4d:48:50:35:14:30:f9:db:40:79:78:49: 79:88:46:ee:90:9f:84:5f:84:a0:50:7a:1f:a6:73:2c:ef:84: 1c:7e:6e:a8:21:26:15:c9:34:4e:87:36:00:54:9a:39:0a:d2: 2b:41:16:8c:b0:da:f5:f5:04:30:05:45:a2:51:b8:d4:5e:94: 01:a9:a7:5a:68:0c:25:12:ea:69:16:6e:35:58:d7:3a:f8:bf: ae:03:c3:45:92:65:f3:ca:06:2f:f2:c8:bf:8c:cb:ec:80:d9: 89:cd:3a:f8:39:ac:40:b1:9c:eb:22:17:b6:00:d5:e5:4b:79: 9a:6c:9e:51:7b:81:b8:b9:87:34:e5:40:b4:bc:f7:8c:8a:0c: 1e:44:c8:0e:88:44:0c:e9:dd:df:ae:8c:e4:68:4a:07:4b:e3: 2a:97:c6:77:a8:3d:bb:92:74:d8:06:d5:9e:a9:db:8b:c9:e3: e0:7f:82:e4:30:a1:7b:1c:86:f6:b3:44:2f:70:b1:fe:fe:3b: 84:e3:f9:8f:7b:6d:19:8c:d9:9e:ea:88:85:56:cd:94:8e:cc: 95:0c:79:8d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICInkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjYwNjEwMTMzODUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI5NjhlYS1iMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MgPatYWjK/dogykxQP5pl5Bm3GJsvWuGNrDdkEsL8fsPdvmkXlFzHYdCXE7 2G+OVACpPd9EuCU3LPr0TZfu/zuxYeChyBbqYSKT2rozD4YYZYmK/FdeJDY3XoEE F74e6m6ubNRbzvPSOBqKFed/GS0+MUMGfXBatMuCN9jK0FWW5jrMqqvCdy0M4dof u0Jslbzsi67NVIsjGYvKnEo7Ll3d7spIk4XBpeYqoP4N1yT6UF09A3n3VAunzkSs Ir+Ilc+usm9a+n3aobzk1mrWECjhA0M63sms2Rmr/2uXEwXkjCul4EyfVIoLgW2/ fFmi8N9nhFb4SJvx3hXpaHyWHQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFN9JxbLo XHNO3J5v91efugPz6aLoMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvNDk1Njc5NjhE MDcwMTFGMEEyODUyOTI5QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK/U0AwQAcG1UAwQAyxEkAwQDy6pQMA0GCSqGSIb3DQEBCwUAA4IB AQBSYIWCiZTfdXyalRh4ke0U1URZfc2bjnd8XfcnMQT9DphwLdk4nc1EV+1NSFA1 FDD520B5eEl5iEbukJ+EX4SgUHofpnMs74Qcfm6oISYVyTROhzYAVJo5CtIrQRaM sNr19QQwBUWiUbjUXpQBqadaaAwlEuppFm41WNc6+L+uA8NFkmXzygYv8si/jMvs gNmJzTr4OaxAsZzrIhe2ANXlS3mabJ5Re4G4uYc05UC0vPeMigweRMgOiEQM6d3f rozkaEoHS+Mql8Z3qD27knTYBtWeqduLyePgf4LkMKF7HIb2s0QvcLH+/juE4/mP e20ZjNme6oiFVs2UjsyVDHmN -----END CERTIFICATE-----Generated at Sat Jun 13 08:46:56 2026 by rpki-client